
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: R+Z/0llM0OLYAC1+eFDPg17ATFXjawNEfpNvhCkQJ0Y=
Subject key identifier: B9:6E:B1:10:97:41:3A:F5:1F:F9:55:E8:69:C2:87:A5:5C:CB:9E:14
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: E6
Signing time: Mon 21 Sep 2026 06:29:29 +0000
Manifest this update: Mon 21 Sep 2026 06:29:28 +0000
Manifest next update: Mon 28 Sep 2026 06:29:28 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: TAzUWqAnxVV6v07qYFiu9KfHjXBXMKPf0DNvhCPM68c=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: fH+Os/s7SYYFE9B1LFr1LyTEBlLJ9szkGGwcIpwvf+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Sep 21 06:29:28 2026 GMT
Not After : Sep 28 06:29:28 2026 GMT
Subject: CN=6ab0cec9-a8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:b2:42:0c:8b:d9:60:64:af:bd:1d:a2:87:
0d:21:92:ce:8d:fb:47:49:a4:f5:ae:5a:19:a3:3b:
62:71:ed:a5:95:65:c9:ac:5f:fd:66:bd:d5:78:1a:
81:98:68:a6:21:20:c1:d4:a0:67:6d:2c:2f:e9:74:
bc:17:82:d9:49:22:6d:99:34:ec:19:5f:c7:93:e9:
f4:77:ed:bf:88:8c:55:f3:75:c1:bc:48:af:78:ae:
fe:60:20:61:56:b5:9d:82:fe:cd:0d:fe:96:5f:62:
c0:f4:46:de:59:7c:e4:19:7d:6b:b1:b9:1c:8e:a1:
09:98:8d:7b:4e:79:64:6b:fb:c8:50:94:e8:98:4b:
64:05:b5:31:24:a3:73:f8:e0:bb:e3:cd:0d:de:63:
88:4c:f3:54:09:9a:f0:8e:7e:74:17:92:84:22:b1:
d3:68:2d:50:cd:da:51:f8:b7:cf:fd:5d:11:b2:be:
16:5b:32:f1:38:ec:29:05:47:e4:6c:cc:b2:81:10:
fc:d4:91:78:10:e9:00:43:e1:cc:12:f4:bd:e7:d3:
ca:59:65:d2:0b:4a:64:db:d6:2e:69:8f:38:76:58:
ba:d3:dd:9b:85:00:7a:0c:2c:9b:67:31:e7:31:3f:
66:26:e9:61:14:4d:62:63:1f:fe:f6:05:8e:bd:4c:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:B1:10:97:41:3A:F5:1F:F9:55:E8:69:C2:87:A5:5C:CB:9E:14
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:b5:dd:f3:3b:00:ab:8b:7c:8b:30:1e:a3:96:17:19:39:dd:
aa:48:20:fc:81:93:ac:44:9e:86:5f:da:f4:fa:59:76:20:c6:
86:df:d1:0c:b0:49:3b:b7:09:16:7f:39:fb:96:e6:a6:ed:60:
fa:c6:9b:db:c1:5c:65:eb:f7:cf:7b:18:5d:7d:12:e9:45:8c:
bf:c3:fb:df:36:c9:ba:9b:7f:e7:61:74:27:47:02:1b:d7:4d:
fc:41:85:f8:94:59:62:c5:86:76:7d:e6:07:4b:d2:a9:dc:39:
a6:7e:af:e5:7c:a4:84:7a:a9:5b:b7:a4:8e:65:36:e6:61:7e:
62:e7:c2:f4:5e:11:8e:3d:57:84:2e:e0:33:b7:45:4a:e4:3c:
f2:f4:6f:f2:a1:a6:06:14:60:ab:09:de:77:c4:3c:a3:e6:8f:
61:a2:49:83:ac:13:75:d5:05:fc:5a:c8:a1:1e:bd:e2:fe:d2:
ac:de:9e:6d:49:1d:12:f8:0c:0f:82:5d:b2:4c:cf:d4:93:fc:
c1:65:4d:88:93:77:16:27:82:46:d9:d2:bc:29:ef:f7:2e:eb:
df:f5:bb:61:27:e4:b5:df:5d:5d:1b:86:98:a0:ca:2a:4a:57:
6f:df:20:e7:56:9a:a0:b7:bd:6a:d6:f1:27:47:37:ae:df:63:
55:4f:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:25:23 2026 by rpki-client